{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,7,7]],"date-time":"2024-07-07T14:35:53Z","timestamp":1720362953556},"reference-count":23,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2014,10,1]],"date-time":"2014-10-01T00:00:00Z","timestamp":1412121600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Softw Tools Technol Transfer"],"published-print":{"date-parts":[[2015,6]]},"DOI":"10.1007\/s10009-014-0351-0","type":"journal-article","created":{"date-parts":[[2014,9,30]],"date-time":"2014-09-30T14:09:53Z","timestamp":1412086193000},"page":"251-266","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Security risk analysis of system changes exemplified within the oil and gas domain"],"prefix":"10.1007","volume":"17","author":[{"given":"Atle","family":"Refsdal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bj\u00f8rnar","family":"Solhaug","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ketil","family":"St\u00f8len","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2014,10,1]]},"reference":[{"key":"351_CR1","doi-asserted-by":"crossref","first-page":"681","DOI":"10.1016\/j.jhazmat.2006.03.049","volume":"A137","author":"T Aven","year":"2006","unstructured":"Aven, T., Sklet, S., Vinnem, J.E.: Barrier and operational risk analysis of hydrocarbon releases (BORA-Release). Part I. Method description. J. Haz. Mater. A137, 681\u2013691 (2006)","journal-title":"J. Haz. Mater."},{"key":"351_CR2","doi-asserted-by":"crossref","unstructured":"Ben-Gal, I.: Bayesian networks. In: Ruggeri, F., Kenett, R.S., Faltin, F.W. (eds.) Encyclopedia of Statistics in Quality and Reliability. Wiley, Chichester (2007)","DOI":"10.1002\/9780470061572.eqr089"},{"key":"351_CR3","doi-asserted-by":"crossref","unstructured":"Bergomi, F., Paul, S., Solhaug, B., Vignon-Davillier, R.: Beyond traceability: Compared approaches to consistent security risk assessments. In: Proceedings of Eighth International Conference on Availability, Reliability and Security (ARES\u201913), pp. 814\u2013820. IEEE Computer (2013)","DOI":"10.1109\/ARES.2013.109"},{"key":"351_CR4","unstructured":"Breu, M., Breu, R., L\u00f6w, S.: MoVEing forward: towards an architecture and processes for a Living Models infrastructure. Int. J. Adv. Life Sci. 3(1\u20132), 12\u201322 (2011)"},{"key":"351_CR5","unstructured":"EUROCONTROL. Methodology report for the 2005\/2012 integrated risk picutre for Air Traffic Management in Europe. EEC Technical\/Scientific Report No. 2006\u2013041 (2006)"},{"key":"351_CR6","volume-title":"Calculated Risks\u2014How to Know When Numbers Deceive You","author":"G Gigerenzer","year":"2002","unstructured":"Gigerenzer, G.: Calculated Risks\u2014How to Know When Numbers Deceive You. Simon & Schuster, New York (2002)"},{"key":"351_CR7","doi-asserted-by":"crossref","unstructured":"Hogganvik, I., St\u00f8len, K.: Risk analysis terminology for IT-systems: does it match intuition? In: 4th International Symposium on Empirical Software Engineering (ISESE\u201905), pp. 13\u201323. IEEE Computer Society (2005)","DOI":"10.1109\/ISESE.2005.1541810"},{"key":"351_CR8","doi-asserted-by":"crossref","unstructured":"Hogganvik, I., St\u00f8len, K.: A graphical approach to risk identification, motivated by empirical investigations. In: 9th International Conference on Model Driven Engineering Languages and Systems (MoDELS\u201906), volume 4199 of LNCS, pp. 574\u2013588. Springer (2006)","DOI":"10.1007\/11880240_40"},{"key":"351_CR9","volume-title":"Dynamic Probabilistic Systems, Volume I: Markov Models","author":"RA Howard","year":"1971","unstructured":"Howard, R.A.: Dynamic Probabilistic Systems, Volume I: Markov Models. Wiley, New York (1971)"},{"issue":"3","key":"351_CR10","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1287\/deca.1050.0020","volume":"2","author":"RA Howard","year":"2005","unstructured":"Howard, R.A., Matheson, J.E.: Influence diagrams. Decis. Anal. 2(3), 127\u2013143 (2005)","journal-title":"Decis. Anal."},{"key":"351_CR11","unstructured":"Innerhofer-Oberperfler, F., Breu, R.: Using an enterprise architecture for IT risk management. In: Information Security South Africa Conference (ISSA\u201906) (2006)"},{"key":"351_CR12","unstructured":"International Electrotechnical Commission. IEC 61025 fault tree analysis (FTA) (1990)"},{"key":"351_CR13","unstructured":"International Electrotechnical Commission. IEC 61165 application of Markov techniques (1995)"},{"key":"351_CR14","unstructured":"International Organization for Standardization. ISO 31000 risk management\u2014principles and guidelines (2009)"},{"key":"351_CR15","doi-asserted-by":"crossref","unstructured":"Lund, M.S., Solhaug, B., St\u00f8len, K.: Model-Driven Risk Analysis\u2014The CORAS Approach. Springer, Berlin, Heidelberg (2011)","DOI":"10.1007\/978-3-642-12323-8"},{"key":"351_CR16","doi-asserted-by":"crossref","unstructured":"Lund, M.S., Solhaug, B., St\u00f8len, K.: Risk analysis of changing and evolving systems using CORAS. In: Foundations of Security Analysis and Design VI (FOSAD VI), volume 6858 of LNCS, pp. 231\u2013274. Springer (2011)","DOI":"10.1007\/978-3-642-23082-0_9"},{"key":"351_CR17","unstructured":"MoVE\u2014Model Versioning and Evolution. http:\/\/move.q-e.at\/ . Accessed 27 Aug 2014 (2014)"},{"key":"351_CR18","unstructured":"Object Management Group. OMG Unified Modeling Language (OMG UML), Superstructure. Version 2.2. OMG Document: formal\/2009-02-02 (2009)"},{"key":"351_CR19","doi-asserted-by":"crossref","unstructured":"Seehusen, F., Solhaug, B.: Tool-supported risk modeling and analysis of evolving critical infrastructures. In: Multidisciplinary Research and Practice for Information Systems, volume 7465 of LNCS, pp. 562\u2013577. Springer (2012)","DOI":"10.1007\/978-3-642-32498-7_43"},{"issue":"2","key":"351_CR20","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1007\/s12652-013-0179-6","volume":"5","author":"B Solhaug","year":"2014","unstructured":"Solhaug, B., Seehusen, F.: Model-driven risk analysis of evolving critical infrastructures. J. Ambient Intell. Hum. Comput. 5(2), 187\u2013204 (2014)","journal-title":"J. Ambient Intell. Hum. Comput."},{"key":"351_CR21","doi-asserted-by":"crossref","unstructured":"Solhaug, B., St\u00f8len, K.: The CORAS language\u2014Why it is designed the way it is. In: Safety, Reliability, Risk and Life-Cycle Performance of Structures and Infrastructures, Proceedings of 11th International Conference on Structural Safety and Reliability (ICOSSAR\u201913), pp. 3155\u20133162. CRC Press (2013)","DOI":"10.1201\/b16387-456"},{"key":"351_CR22","doi-asserted-by":"crossref","unstructured":"Tran, L.M.S., Solhaug, B., St\u00f8len, K.: An approach to select cost-effective risk countermeasures exemplified in coras. Technical report A24343, SINTEF ICT (2013)","DOI":"10.1007\/978-3-642-39256-6_18"},{"key":"351_CR23","unstructured":"Voirin, J.-L.: Method and tools for constrained system architecting. In: 18th Annual International Symposium of the International Council on Systems Engineering (INCOSE\u201908), pp. 775\u2013789. Curran Associates, Inc. (2008)"}],"container-title":["International Journal on Software Tools for Technology Transfer"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10009-014-0351-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10009-014-0351-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10009-014-0351-0","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,18]],"date-time":"2022-04-18T11:29:58Z","timestamp":1650281398000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10009-014-0351-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,10,1]]},"references-count":23,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2015,6]]}},"alternative-id":["351"],"URL":"https:\/\/doi.org\/10.1007\/s10009-014-0351-0","relation":{},"ISSN":["1433-2779","1433-2787"],"issn-type":[{"value":"1433-2779","type":"print"},{"value":"1433-2787","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,10,1]]}}}